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This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) An apparatus In a communication system including at least 
a first network coupled to a destination to which transmissions of data packets are made from the 
first n e twork to the destination, a syst e m for providing virus prot e ction comprising : 

a gateway coupled between th e first n e twork and th e d e stination, which includ e s 
a firewall configured to: 

receive , which rocoivos the data packets over a first network; y ^ftd 
virus scanning engine, coupled to the firewall, which receives the data pack e ts aft e r 
r e ception by th e fir e wall, t e sts th e data pack e ts, pass e s any data pack e ts, which ar e t e st e d to not 
contain a virus to the destination and discards any data packets which are tested and contain a 
virus, wherein the firewall 

classify classifi e s t he received data packets based on the contents of the data 
packets into packets of a first type which cannot contain a virus and packets of a second 
type which can contain a virus; 

forward and fon^^ards the data packets of the first type to a_the-destination without 
testing by a.^fee-virus scaiming engine; and 

forward forwards t he data packets of the second type to a^^ie-virus scanning 
engine for testing thereof 

2-3. (Canceled) 

4. (Currently Amended) The apparatus of A system in accordance with claim 1, 
whereinT_the classifsdng comprises determining that data packets of the first type contain real 
time data. 

5. (Currently Amended) The apparatus of A system in accordance with claim 43-, 
wherein-rjhe classifying comprises determining that data packets of the first type are part of an 
audio or video data strea m contain real time data . 
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6. (Currently Amended) The apparatus of A system in accordance with claim 1, 
wherein : the virus scanning e ngine, wh e n a virus is detected, alerts the firewall that a virus has 
boon detected which, the firewall is configured to stop reception of a data stream containing the 
data packets in response to fee-an aler t fi'om the virus scanning engin e , stops rocoption of a data 
stream containing the data pack e ts . 

7-10. (Canceled) 

11. (Currently Amended) The apparatus of A syst e m in accordanc e with claim 1^ 
further comprising wh e r e in: a buffer configured to store w hich stor e s t he data packets of the 
second type while the virus scanning engine is testing p rocessing t he data packets of the second 
typo t o detect a virus. 

12-31. (Canceled) 

32. (Currently Amended) The apparatus of A system in accordanco with claim 1, 
wherei m the firewall is configured to receive fi-om a packet classification database , coupl e d to 
th e fir e wall, which provides information defining t o th e fir e wall which d e fin e s t he first and 
second types of data packetsf 

and a virus dotoction database, couplod to the virus scanning engine, which provides 
programming controlling the testing of the data packets of th e s e cond typ e by th e virus scanning 

33. (Currently Amended) The apparatus of A system in accordanco with claim 32. 
further comprising: A wh e r e in: 

a pack e t classification databas e , coupl e d to th e fir e wall, which provid e s information to 
the firewall which defines the first and second typos of data packets; and 
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a virus scanning engine configured to receive from a virus detection database , coupled to 
the virus scanning engine, programming information w hich provid e s programming controlling 
the testing of the data packets of the second type by the virus scanning engine. 

34. (Currently Amended) The apparatus of A system in aocordanco with claim 
further comprising: 7 wherein: 

a paclcet classification database, coupled to the firewall, which provid e s information te 
the firewall which defines the first and second typos of data packets; and 

a virus scanning engine configured to receive from a virus detection database , coupled to 
th e virus scanning e ngin e , progranmiing information w hich provid e s progranmiing controlling 
the testing of the data packets of the second type by the virus scanning engine. 

35-39. (Canceled) 

40. (Currently Amended) The apparatus of A system in accordance with claim I, 
further comprising a wherein: the virus scanning engine , upon detection of a virus in the data 
packets, configured to alert also alerts t he destination upon detection of a virus in the data 

41. (Currently Amended) The apparatus of A system in accordance with claim 1 
wherein-r.the destination is a local area network. 

42. (Currently Amended) The apparatus of A syst e m in accordanc e with claim 1 
whereim.the destination is a personal computer. 

43. (Currently Amended) The apparatus of A syst e m in accordanc e with claim 1, 
whereim.the destination is a second network. 

44. (Currently Amended) The apparatus of A system in accordance with claim 1, 
wherein-r.the first network is a wide area network. 
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45. (Currently Amended) The apparatus of A system in accordanc e with claim 44, 
whereim.the wide area network is the Internet. 

46. (Currently Amended) The apparatus of A system in accordance with claim 1, 
wherein-r 

the first network is the Internet; and 

the destination comprises an Internet service provider configured to connect coupled to a 
the-gateway, a modem configured to coimect coupled t o the Internet service provider^ and one of 
a local area or personal computer configured to connect coupl e d t o the modem. 

47. (Currently Amended) The apparatus of A system in accordance with claim 1, 
further comprising a w herein:the virus scanning engine configured to decode decodes t he data 
packets during the testing of d ete miination if t he data packets contain a virus . 

48. (Currently Amended) The apparatus of A system in accordance with claim 47, 
whereim the virus scaiming engine is configured to function functions as a proxy for a 
destination processor configured to receive w hich r e c e iv e s t he data packets. 

49. (Currently Amended) A In a communication system including at least a first 
network coupled to a destination to which transmissions of data packets arc made from the first 
n e twork to th e d e stination, a gateway coupled between th e first n e twork and the d e stination, 
which includ e s a fir e wall and a virus scanning e ngin e , said fir e wall r e c e iving th e data pack e ts, a 
method comprising: 

receiving ^le-data packets at the firewall ; 

classifying the data packets based on the contents of the data packets into packets of a 
first type which cannot contain a virus and a second type which can contain a virus; 

transmitting the received data packets of the first type to a #ie-destinatio n without testing 
by a virus scanning engine; and 
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transmitting the received data packets of the second type from the firewall to a_the-virus 
scanning engine for testings 

testing the data packets with the virus scanning e ngin e ; and 

transmitting from tho virus scanning ongino any data packets which aro tostod by tho 
virus scanning engine to not contain any virus to the dostinationand the discarding any data 
packets which are tested to contain a virus . 

50. (Currently Amended) A computer program stored on a storage medium 
comprising computer executable instructions for performing a method comprising: 

for us e in a virus scanning e ngin e in a communication syst e m including at l e ast a first 
network coupl e d to a d e stination to which fransmissions of data pack e ts ar e mad e from th e first 
network to the destination, a gateway coupled between the first network and the destination, 
which includes a firewall and tho virus scanning engine, coupled to tho firewall, said firewall 

receiving the-data packets;^ th e virus scanning e ngine receiving the data paciccts after 
r e c e ption by the firewall, passes any data packets, which are tested to not contain a virus to the 
destination and discards any data packets which aro tostod to contain a virus, said firewall 

classifying the received data packets based on the contents of the data packets into 
packets of a first type that cannot contain a virus and a second type that can contain a virus; aad 

transmitting forwards the data packets of the first type to a.^fee-destination without testing 
by a_the-virus scanning engine; and 

transmitting forwards the data packets of the second type to a_tfee-virus scanning engine 
for testing th e r e of, the computer program when executed causing th e virus scanning engine to 
e x e cut e at least on e st e p of: 

testing the data packets for the presence of a virus . 

51-52. (Canceled) 

53. (Currently Amended) A computer program in accordance with claim 50, & h 
whereimjhe classifying comprises determining that data packets of the first type contain real 
time data. 
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54. (Currently Amended) A computer program in accordance with claim 50, wherein: 
the computer program when executed causes the virus scanning e ngin e , wh e n a virus is 

dotoctod, to alert the firewall that a virus has boon dotoctod which, in response to the alert, 
controls the firewall to stop r eception of a data stream containing the data packets to be stopped 
in response to an alert from the virus scaiming engine . 

55. (Canceled) 

56. (New) A computer program in accordance with claim 50, wherein the method 
fiirther comprises receiving from a packet classification database information defining first and 
second types of data packets. 

57. (New) A computer program in accordance with claim 53, wherein the classifying 
further comprises determining that data packets of the first type are part of an audio or video data 
stream. 

58. (New) The method of claim 49, wherein the classifying comprises determining 
that data packets of the first type contain real time data. 

59. (New) The method of claim 58, wherein the classifying further comprises 
determining that data packets of the first type are part of an audio or video data stream. 

60. (New) The method of claim 49, further comprising receiving information from a 
packet classification database, said information defining the first and second types of data 
packets. 

61. (New) The method of claim 49, wherein the classifying is performed by a 
firewall. 
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62. (New) Apparatus, comprising: 

a processor configured to control at least some operations of the apparatus; 
memory storing computer executable instructions that, when executed by the processor, 
cause the apparatus to: 

receive data packets; 

classify the data packets based on the contents of the data packets into packets of 
a first type which cannot contain a virus and a second type which can contain a virus; 

transmit the received data packets of the first type to a destination without testing 
by a virus scanning engine; and 

transmit the received data packets of the second type to a virus scanning engine 
for testing. 

63. (New) The apparatus of claim 62, wherein the classifying comprises determining 
that data packets of the first type are part of an audio or video data stream. 
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